Configuring IKE to Find Attached Hardware

Public key certificates can also be stored on attached hardware. The Sun Crypto
Accelerator 1000 board provides storage only. The Sun Crypto Accelerator 4000 and
Sun Crypto Accelerator 6000 boards provide storage, and enable public key operations to
be offloaded from the system to the board.

Note - Logging in remotely exposes security-critical traffic to eavesdropping. Even if you somehow protect
the remote login, the security of the system is reduced to the security
of the remote login session. Use the ssh command for secure remote login.

Check that the PKCS #11 library is linked.

Type the following command to determine whether a PKCS #11 library is linked:

Note - Logging in remotely exposes security-critical traffic to eavesdropping. Even if you somehow protect
the remote login, the security of the system is reduced to the security
of the remote login session. Use the ssh command for secure remote login.

Check that the PKCS #11 library is linked.

IKE uses the library's routines to handle key generation and key storage on
the Sun Crypto Accelerator 4000 board. Type the following command to determine whether
a PKCS #11 library has been linked:

How to Configure IKE to Find the Sun Crypto Accelerator 6000 Board

Before You Begin

The following procedure assumes that a Sun Crypto Accelerator 6000 board is
attached to the system. The procedure also assumes that the software for the
board has been installed and that the software has been configured. For instructions,
see Sun Crypto Accelerator 6000 Board Version 1.1 User's Guide.

On the system console, assume the Primary Administrator role or become superuser.

Note - Logging in remotely exposes security-critical traffic to eavesdropping. Even if you somehow protect
the remote login, the security of the system is reduced to the security
of the remote login session. Use the ssh command for a secure remote
login.

Check that the PKCS #11 library is linked.

IKE uses the library's routines to handle key generation and key storage on
the Sun Crypto Accelerator 6000 board. Type the following command to determine whether
a PKCS #11 library has been linked: